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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 



Listing of Claims: 

1 . (Currently amended) A computerized method of watermarking a software object 
comprising the steps of: 

(a) providing receiving an input sequence; and 

(b) storing a watermark in the state of the software object so that the 
watermark becomes detectable by a recognizer which examines the state of the software object 
when the software object is being run with the input sequence. 

2. (Previously presented) The method as claimed in claim 1, wherein the software 
object is a program or a piece of a program. 

3. (Previously presented) The method as claimed in claim 1 wherein the watermark 
is_detectable in the state of the software object formed by the current values held in at least one 
of: 

(a) at least one stack; 

(b) at least one a heap; 

(c) at least one data register; and 

(d) at least one global variables; 
of the software object. 
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4. (Previously presented) The method of claim 1 or 2 or 3 wherein the watermark is 
stored in an execution state of the software object whereby the input sequence is constructed 
which, when fed to an application of which the software object is a part, will make the software 
object enter a second state which is a representation of the watermark, the representation being 
validated or checked by examining the stack, heap, global variables, registers, program counter 
and the like, of the software object. 

5. (Previously presented) The method of claim 1 wherein the watermark is 
embedded in an execution trace of the software object whereby, as a special input is fed to the 
software object, an address/operator trace is monitored and, based on a property of the trace, the 
watermark is extracted. 

6. (Previously presented) The method of claim 1 or 2 or 3 wherein the watermark is 
embedded in a topology of a dynamically built graph structure. 

7. (Previously presented) The method of claim 6 wherein the dynamically built 
graph structure is detectable in a data structure of the program. 

8. (Currently amended) The method of claim 1 , or 2 or 3 fiirther comprising the 

step of: 

(c) building a recognizer operable to examine the stae-state of the software 
object when run with an input sequence and indicate whether the watermark is detectable in the 
state of the software object. 



Attorney Docket: 1968NP 



9. (Previously presented) The method of claim 8 wherein the recognizer is a 
function adapted to identify and extract the watermark from all other dynamic structures on a 
heap or stack. 

10. (Previously presented) The method of claim 8 wherein the watermark 
incorporates a marker that will allow the recognizer to recognize it easily. 

1 1 . (Previously presented) The method of claim 8 wherein the recognizer is retained 
separately from the program and whereby the recognizer inspects the state of the program. 

\ 

12. (Previously presented) The method of claim 8 wherein the recognizer is 
dynamically linked with the program when it is checked for the existence of a watermark. 

13. (Previously presented) The method of claim 1 , or 2, or 3 wherein the software 
object is a part of an application that is obfuscated or incorporates tamper-proofing code. 

14. (Previously presented) The method of claim 8 wherein the recognizer checks the 
watermark for a signature property. 

15. (Previously presented) The method of claim 14 wherein the signature property is 
evaluated by testing for a specific result from a hard computational problem. 
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16. (Currently amended) Tfee A method of claim 14, wherein the watermark is 
embedded in a topology of a dynamically built graph structure, the method including the step of: 

(d) creating a number having at least one numeric property which is an index 
of the embedded dynamically built graph structure, whereby the signature property is evaluated 
by testing the at least one numeric property. 

17. (Previously presented) The method of claim 16 wherein the signature property is 
evaluated by testing whether the number is a product of two primes. 

1 8. (Previously presented) The method of varying the integrity or origin of a program 
including the steps of: 

(a) watermarking the program with a watermark, wherein the watermark is 
stored in the state of a program so that the watermark becomes detectable when the program is 
being run with an input sequence; 

(b) building a recognizer, wherein the recognizer is adapted to extract the 
watermark from dynamically allocated data wherein the recognizer is kept separately from the 
program; wherein the recognizer is adapted to check for a number. 

19. (Previously presented) The method of claim 18, wherein the number is the 
product of two primes and wherein the number is the index of an embedded watermark graph in 
an enumeration of a class of possibly-embedded watermark graphs each having a different 
topology. 
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20. (Previously presented) The method of claim 1 8 wherein the number is derived 
from a combination of three or more prime numbers. 

21. (Previously presented) The method of claim 18 or 19 v^herein the program is 
further adapted to be resistant to tampering, the resistance to tampering by means of obfuscation 
before or after compilation, or by adding tamper-proof code. 

22. (Previously presented) The method of claim 18 or 19 w^herein the recognizer 
checks for the effect of the watermark on an execution state of the program, thereby preserving 
an ability to recognize the watermark where semantics-preserving transformations have been 
applied to the program. 

23. (Previously presented) A method of watermarking software including the steps 

of: 

(a) embedding a watermark in a string; and 

(b) including in the software code that, when executed with at least one 
predetermined input reproduces the string of step (a), and that produces at least one other string 
when executed with at least one other input; 

wherein the code is included in the software using an obfiiscating process 
that at least inhibits recognition of the string of step (a) by static analysis. 

24. (Currently amended) A computerized method of watermarking software 
comprising the steps of: 
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(a) choosing a watermark from a class of graphs having a pluraHty of 
members that are stored in memory , each member of the class of graphs having at least one 
property, the at least one property being capable of being tested by integrity-testing software; and 

(b) storing the chosen watermark in the software so that when the software is 
run with a predetermined input sequence, the chosen watermark is reproduced and detectable by 
a recognizer which examines the state of the software object . 

25. (Previously presented) The method of claim 24 wherein the watermark is 
rendered tamperproof to certain transformations by subjecting the watermark graph to redundant 
edge insertion. 

26. (Previously presented) The method of claim 24 wherein the watermark is a 
watermark graph including at least one node and wherein each of the at least one node of the 
watermark graph is expanded into a cycle. 

27. (Currently amended) A computerized method of fingerprinting software 
comprising the steps of: 

(a) providing a plurality of watermarked programs, having a watermark stored in a 
state of a software object for the program, the watermark being detectable by a recognizer which 
examines the state of the software object as the software object is being run with a particular 
input sequence. 
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28. (Previously presented) The method of fingerprinting software as claimed in claim 
27 wherein the plurality of watermarked programs each of which has a number with a common 
prime factor. 

29. (Cancelled) 

30. (Currently amended) A computer readable medium including a program for 
watermarking a software object, the program including instructions for causing a computer to : 

(a) r e c e iving receive an input sequence through a data communication 

channel ; and 

(b) storing a watermark in the state of the software object so that the 
watermark becomes detectable by a recognizer which examines the state of the software object 
when the software object is being run with the input sequence. 

3 1 . (Currently amended) A computer comprising: 
a software object; 

means to receive an input sequence; and 

a watermark stored in the state of the software object so that the watermark 
becomes detectable by a recognizer which examines the state of the software object when the 
software object is being run with a particular input sequence. 

32. (Previously presented) A method of fingerprinting software comprising the steps 

of: 
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(a) providing a plurality of watermarked programs, the plurality of 
watermarked programs being obtained by watermarking each program of the plurality of 
programs with a watermark, wherein the watermark is stored in the state of a program so that the 
watermark becomes detectable when the program is being run with an input sequence and 
building a recognizer wherein the recognizer is adapted to extract the watermark from other 
dynamically allocated data wherein the recognizer is kept separately from the program; wherein 
the recognizer is adapted to check for a number. 

33. (Currently amended) A computerized method of fingerprinting software 
comprising the steps of: 

(a) providing a plurality of watermarked programs, the plurality of 
watermarked programs being obtained by watermarking each program of the plurality of 
programs with a watermark, the watermark being obtained by embedding a watermark in a_string 
and including in the software code that, when executed with at least one predetermined input 
reproduces the strin g so as to be detectable by a recognizer , and that produces at least one other 
string when executed with at least one other input. 

34. (Original) A method of fingerprinting software comprising the steps of: 
(a) providing a plurality of watermarked programs, the plurality of 

watermarked programs being obtained by watermarking each program of the plurality of 
programs with a watermark, the watermark being obtained by choosing a watermark from a class 
of graphs having a plurality of members, each member of the class of graphs has at least one 
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property, the at least one property being capable of being tested by integrity-testing software and 
applying the watermark to the software. 

35. (Previously presented) A computer-readable medium including a program for 
verifying at least one of the integrity and origin of a program, the program including instructions 
for: 

(a) watermarking the program with a watermark, wherein the watermark is 
stored in the state of a program so that the watermark becomes detectable when the program is 
being run with an input sequence; 

(b) building a recognizer wherein the recognizer is adapted to extract the 
watermark from other dynamically allocated data wherein the recognizer is kept separately from 
the program; wherein the recognizer is adapted to check for a number. 

36. (Previously presented) A computer-readable medium including a program for 
watermarking software, the program including instructions for: 

(a) embedding a watermark in a static string; and 

(b) including in the software code that, when executed with at least one 
predetermined input reproduces the string of step (a), and that produces at least one other string 
when executed with at least one other input. 

37. (Original) A computer-readable medium including a program for 
watermarking software, the program including instructions for: 
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(a) choosing a watermark from a class of graphs having a plurality of 
members, each member of the class of graphs has at least one property, the at least one property 
being capable of being tested by integrity-testing software; and 

(b) applying the watermark to the software. 

38. (Previously presented) A computer capable of verifying at least one of the 
integrity and origin of a program, the computer comprising: 

an input sequence; 

a watermark for watermarking the program, wherein the watermark is stored in 
the state of a program so that the watermark becomes detectable when as the program is being 
run with the input sequence; a recognizer, wherein the recognizer is adapted to extract the 
watermark from other dynamically allocated data wherein the recognizer is kept separately from 
the program, wherein the recognizer is adapted to check for a number. 

39. (Curently amended) A computer for watermarking software comprising: 

(a) a memory for storing data representinR a strin g that has a watermark 
embedded in it : and 

(b) a wat e rmark e mb e dd e d in th e string; and 

(e) (h) an obfiiscation technique for including in software code that, when 
executed with at least one predetermined input reproduces the string so as to be detectable by a 
recognizer , and that produces at least one other string when executed with at least one other 
input. 
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40. (Original) A computer comprising: 

a watermark from a class of graphs having a plurality of members, each member 
of the class of graphs has at least one property, the at least one property being capable of being 
tested by integrity-testing software; and 

software to which the watermark is applied. 

41 . (Original) The method of claim 1 , wherein the watermark is detectable in any 
portion of the dynamic data state of the software object. 

42. (Original) The method of claim 1, wherein the software object is an 
executable media object. 

43. (Original) The method of claim 1 , wherein no part of the state of the software 
object in which the watermark becomes detectable is visually or audibly apparent. 

44. (Original) The method of claim 8, wherein the recognizer is built concurrently 
with the watermark and input sequence. 

45. (Original) The method of claim 16, wherein said graph is an enumeration of a 
class of possibly-embedded watermark graphs each having a different topology. 

46. (Original) The method of claim 1 8, wherein the recognizer is built 
concurrently with the watermark and input sequence. 
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47. (Original) The method of claim 23, wherein the software code includes a state 
variable updated during execution of the code and that influences the string outputted. 

48. (Original) The method of claim 3 1 , wherein no part of the state of the 
software object in which the watermark becomes detectable is visually or audibly apparent. 

49. (Original) A method of watermarking software including the steps of: 

(a) embedding a watermark in a string, thereby forming a watermark string; 

(b) converting the string into executable code that, when executed, constructs 
a dynamic string by: 

(i) receiving an input in the form of at least one input variable; 

(ii) defining and updating a string index variable that controls the 
location of writing to the dynamic string; 

(iii) defining a state variable and updating the state variable in a 
dynamically-determined fashion so that the value of said state variable in at least one read 
operation will vary depending on which of at least two execution paths was taken by said 
executable code to reach said operation; and 

(iv) dependent on said at least one input variable, string index variable 
and state variable, writing to the dynamic string; 

wherein the dynamic string reconstructs the watermark string for at least 
one predetermined input and not for the other inputs. 
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50. (Original) A method of watermarking a software object comprising the steps 

of: 

(a) providing an input sequence; and 

(b) storing a watermark in the state of the software object as the software 
object is being run with the input sequence, wherein the watermark is stored in an execution state 
of the software object whereby the input sequence is constructed which, when fed to an 
appHcation of which the software object is a part, will make the software object enter a second 
state which is a representation of the watermark, the representation being validated or checked by 
examining the stack, heap, global variables, registers, program counter and the like, of the 
software object. 

5 1 . (Original) A method of watermarking a software object comprising the steps 

of: 

(a) providing an input sequence; and 

(b) storing a watermark in the state of the software object as the software 
object is being run with the input sequence, wherein the watermark is embedded in an execution 
trace of the software object whereby, as a special input is fed to the software object, an 
address/operator trace is monitored and, based on a property of the trace, the watermark is 
extracted. 

52. (Original) The method of varying the integrity or origin of a program 
including the steps of: 

(a) watermarking the program with a watermark, wherein the watermark is 
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Stored in the state of a program as the program is being run with an input sequence; 

(b) building a recognizer, wherein the recognizer is adapted to extract the 
watermark from dynamically allocated data wherein the recognizer is kept separately from the 
program; wherein the recognizer is adapted to check for a number, wherein the recognizer checks 
for the effect of the watermark on an execution state of the program, thereby preserving an ability 
to recognize the watermark where semantics-preserving transformations have been applied to the 
program. 

53. (Previously presented) A method of watermarking software including the steps 

of: 

(a) embedding a watermark in a string; and 

(b) including in the software code that, when executed with at least one 
predetermined input reproduces the string of step (a), and that produces at least 
one other string when executed with a t least one other input; 

wherein the part of the code that manipulates dynamically allocated 
structures is constricted so that it is computationally difficult to statically determine whether it is 
safe to perform a transformation of the code incorporating the at least one opaque predicate or 
variable. 

54. (Previously presented) A method of watermarking software including the steps 

of: 

(a) embedding a watermark in a string; and 

(b) including in the software code that, when executed with at least one 
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predetermined input reproduces the string of step (a), and that produces at least one other string 
when executed with at least one other input; 

wherein at least a portion of the code incorporates at least one opaque predicate 
and the code is constructed so that it is computationally difficult to statically determine whether 
it is safe to perform a transformation of the code incorporating the at least one opaque predicate. 
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